DPDP Notice

The itemised notice required by section 5 of the Digital Personal Data Protection Act 2023.

Draft for legal review. This document was prepared to reflect how Xpress Recruiters actually handles personal data, and to follow the Digital Personal Data Protection Act 2023 and, where it applies, the UK/EU GDPR. It has not been reviewed by a practising data protection lawyer. Items marked [to confirm] need a decision from the business before this page is published.

This notice is given under section 5 of the Digital Personal Data Protection Act 2023. It is deliberately short and itemised. The fuller picture, including GDPR, is in our Privacy Policy.

In one line We are Xpress Recruiters, a legal recruitment agency in New Delhi. We process your personal data to match you to legal roles, or to fill roles for you. You can ask us to show it to you, correct it, erase it, or stop - at any time, free of charge.

The personal data we process, and for what purpose

Personal data	Purpose
Name and contact details	To contact you about a role, a brief or an enquiry
CV, qualifications, bar enrolment, employment history, PQE, practice area	To assess whether you fit a specific legal role
Notice period, current and expected compensation, location preference	To judge whether a role is realistically viable for you, and to support offer discussions
Our notes and assessment, interview feedback	To run the search and advise the employer
Referee details and references	To take references, once you tell us to
Client contact name, title and work contact details	To take a brief and manage the engagement

How to exercise your rights

Use the data rights request form, or email connect@xpressservices.in. You may:

obtain a summary of the personal data we hold about you and how we process it;
have it corrected, completed or updated;
have it erased;
withdraw consent - as easily as you gave it;
nominate another individual to exercise your rights if you die or become incapacitated;
have your grievance heard by us.

There is no charge, and you do not need to give a reason to withdraw consent or ask for erasure.

How to complain to the Board

Please raise it with our Grievance Officer first - [to confirm - name], via connect@xpressservices.in. If you remain dissatisfied you may complain to the Data Protection Board of India in the manner it prescribes.

Consent, and withdrawing it

Where we rely on your consent - principally to keep you on file for future roles, and to send your CV to a specific employer - that consent is limited to the purpose we described when we asked for it. Withdrawing it does not make our earlier processing unlawful, but we will stop, and we will tell our processors to erase your data, unless a law requires us to keep a record.

Translation obligation. Section 5 of the DPDP Act requires that this notice be made available in English and in each of the languages in the Eighth Schedule to the Constitution. Only the English version exists so far. [to confirm - commission translations, at minimum Hindi, before relying on this notice.]

Want to see, correct, or delete what we hold?

Make a request →